
$ rpki-client -vvf rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft
File: tNQViTJWcWZLLGBPEt4EdX4uzNs.mft (raw, json)
Hash identifier: Ag91CF83/HrFYFgdcZ0P5D50vt+PrFDAa3K4+fh8jR4=
Subject key identifier: BC:57:1A:C4:BC:A6:18:82:4A:B6:BB:DC:03:34:FF:97:C9:CA:F5:A0
Authority key identifier: B4:D4:15:89:32:56:71:66:4B:2C:60:4F:12:DE:04:75:7E:2E:CC:DB
Certificate issuer: /CN=A916432A/serialNumber=B4D41589325671664B2C604F12DE04757E2ECCDB
Certificate serial: 0857
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft
Manifest number: 084C
Signing time: Tue 18 Aug 2026 21:19:01 +0000
Manifest this update: Tue 18 Aug 2026 21:19:00 +0000
Manifest next update: Tue 25 Aug 2026 21:19:00 +0000
Files and hashes: 1: tNQViTJWcWZLLGBPEt4EdX4uzNs.crl (hash: +YaVXmURM+n6YkQM7g+9+m3pkolo2bEy3oP/eY5QViU=)
2: 67CD2004292211EB8A9B3D73C4F9AE02.roa (hash: tcE4gvT48rVkQCBAi3c3JCe7vlGJ11O5lP9n2KM3sUE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.crl
rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2135 (0x857)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916432A, serialNumber=B4D41589325671664B2C604F12DE04757E2ECCDB
Validity
Not Before: Aug 18 21:19:00 2026 GMT
Not After : Aug 25 21:19:00 2026 GMT
Subject: CN=6a84cc45-ff50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:77:e5:89:70:a6:64:7e:28:c1:68:24:99:24:
e3:59:61:1f:52:a2:6d:b4:d7:9c:a1:ea:9a:dc:da:
34:6c:f9:cb:44:94:78:a2:02:b8:e1:43:16:76:13:
3f:c4:01:49:cc:73:58:93:c7:86:35:f2:ce:7d:eb:
d2:3c:13:3e:aa:fa:46:95:63:d5:48:96:7a:8c:fc:
f5:75:44:20:a1:ba:30:fd:8b:bb:ec:72:68:e7:7f:
a4:76:fc:eb:df:13:75:6f:5a:6d:42:3c:0f:4a:ab:
9b:ff:33:c1:24:c9:77:45:d8:be:b7:8c:72:4f:61:
58:09:b1:6a:ca:ba:33:32:71:a6:ee:1b:30:4a:23:
35:90:4d:45:8d:c1:4d:0d:08:d0:96:92:0e:70:ab:
a7:3c:d4:9f:ec:26:6b:c9:10:b6:c8:1f:68:f5:b9:
4a:14:d5:c8:ee:42:6b:41:a9:ac:e0:6b:00:6e:b5:
50:d1:a4:e3:75:fd:bf:42:ae:d5:d0:be:24:b5:7d:
ee:93:d1:36:e7:03:c9:58:8d:78:b0:91:28:ad:ee:
21:53:d5:75:13:b8:08:23:a5:90:c7:93:f5:75:4d:
99:64:93:12:0b:10:fd:79:26:54:cf:c8:66:75:bb:
f3:d7:72:bf:5d:32:42:53:d1:9d:99:ac:71:ea:eb:
13:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:57:1A:C4:BC:A6:18:82:4A:B6:BB:DC:03:34:FF:97:C9:CA:F5:A0
X509v3 Authority Key Identifier:
keyid:B4:D4:15:89:32:56:71:66:4B:2C:60:4F:12:DE:04:75:7E:2E:CC:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a6:87:3a:ba:c8:99:e2:5e:81:44:0f:c7:a9:6b:bc:5e:81:
db:5c:00:d5:8d:76:24:8c:7d:c7:c4:54:df:27:ee:ab:54:fa:
b4:db:cf:7c:6b:df:8e:9a:52:29:94:44:d8:a1:c0:f9:65:f5:
4c:ec:46:b4:f2:22:d2:a9:a8:d1:83:37:c9:d8:c4:29:35:ab:
61:79:b5:e2:56:1c:e4:96:f7:eb:06:c6:0c:58:73:53:fe:69:
da:2a:32:d0:b6:90:28:59:ac:02:68:16:29:9c:ff:28:ea:aa:
17:98:4e:08:86:b4:53:e4:bb:c2:f5:5d:08:6f:d5:7f:67:aa:
36:5e:5f:fe:a8:92:74:46:16:d8:dc:68:35:9d:5c:67:62:03:
cf:11:60:c4:d5:f1:64:c6:5d:ea:89:dc:79:08:40:3a:4c:59:
5b:34:b3:ae:0c:4a:af:03:4e:30:67:8a:e7:c0:36:9f:20:b2:
c9:54:23:77:b0:db:17:33:b4:db:eb:05:56:2e:28:83:a7:a8:
a8:1e:b8:02:77:ec:1e:97:02:e6:5c:80:e8:c3:80:4f:e1:eb:
48:26:28:1b:ae:58:1f:58:4f:a0:e1:53:85:95:c8:b3:61:34:
c1:c6:62:96:26:20:8d:94:f4:c2:59:44:0c:a4:32:8c:75:64:
10:58:3a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:54:57 2026 by rpki-client